From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Craven Subject: Re: [PATCH 7/7] gnu: Enable CONFIG_HOTPLUG_PCI. Date: Fri, 3 Feb 2017 03:54:59 +0100 Message-ID: References: <20170201233531.2640-1-david@craven.ch> <20170201233531.2640-7-david@craven.ch> <20170202202006.03597708@scratchpost.org> <20170202214159.2901d3e4@scratchpost.org> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:44444) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cZU1h-0007FY-NA for guix-devel@gnu.org; Thu, 02 Feb 2017 21:55:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cZU1e-0004UQ-NE for guix-devel@gnu.org; Thu, 02 Feb 2017 21:55:05 -0500 Received: from mail-qt0-x244.google.com ([2607:f8b0:400d:c0d::244]:34624) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cZU1e-0004TC-I4 for guix-devel@gnu.org; Thu, 02 Feb 2017 21:55:02 -0500 Received: by mail-qt0-x244.google.com with SMTP id w20so1751194qtb.1 for ; Thu, 02 Feb 2017 18:55:00 -0800 (PST) In-Reply-To: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Danny Milosavljevic Cc: guix-devel Mmh, I think that forcing binary blobs out of the linux kernel is only useful if vendors move more work into the driver and silicon instead of firmware that cannot be updated, since each flash device is a security risk. But it could also backfire. The thunderbolt firmware for example is only updateable from windows. That leaves me with a crashy hdmi output and doesn't stop the NSA from flashing it anyway and getting access to my PCIE bus - definitively not an improvement over a binary blob... I'll push these patches if there are no objections then. Can I regenerate a pgp key? I think my keys where in the gnome keyring or something, backing up ~/.gnupg/secring.pgp didn't keep my keys :/